IT Audit Lead: SOC & Controls

CVS Health; Atlanta (GA); On-site; USD 102,000 - 204,000; Full time

Benefits offered by this job

Medical, dental, and vision coverage

Paid time off

Retirement savings options

Job summary

CVS Health is seeking a Manager, Corporate IT Audit to lead our SOC Reporting team and oversee SOC 1 and SOC 2 audits. You will manage audits from planning through final reporting, ensuring quality, accuracy, and compliance while strengthening the company's control environment.

You will assess IT and business risks, coach a growing audit team, and collaborate with control owners and external auditors. This full-time role requires travel up to 10% and offers comprehensive benefits.

Qualifications

• 5+ years of experience in IT audit, risk management, compliance, or internal controls.
• Ability to travel up to 10%.
• Experience leading audits, projects, or teams.
• Professional certification such as CISA, CPA, CISM, CRISC, or CIA (or actively pursuing certification).
• Knowledge of IT controls, cybersecurity, cloud technologies, and enterprise systems.
• Familiarity with SOC audits and industry frameworks such as NIST, ISO, or COBIT.
• Strong communication, analytical, and project management skills.

Responsibilities

• Lead SOC 1 and SOC 2 audits from planning through reporting.
• Review testing results and identify control issues.
• Ensure audit reports are accurate and high quality.
• Serve as the subject matter expert for SOC reporting.
• Communicate audit results, risks, and recommendations clearly.
• Oversee multiple audits and priorities simultaneously.
• Drive continuous improvement in audit processes.
• Stay current on audit standards, IT controls, cybersecurity, and regulatory requirements.

Skills

IT audit

Risk management

Compliance

Project management

Communication

Leadership

Education

CISA certification

CPA license

CISM

CRISC

CIA certification

Tools

NIST framework

ISO / COBIT

SOC 1 & SOC 2 auditing

Job description

CVS Health is seeking a Manager, Corporate IT Audit to lead our SOC Reporting team and oversee SOC 1 and SOC 2 audits. You will manage audits from planning through final reporting, ensuring quality, accuracy, and compliance while strengthening the company's control environment.

You will assess IT and business risks, coach a growing audit team, and collaborate with control owners and external auditors. This full-time role requires travel up to 10% and offers comprehensive benefits.